Publicité
Publicité
Commentaire : Rapport FRST
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-12-2023
Exécuté par gabri (administrateur) sur 5CD132D2ZD (HP HP ProBook 440 G8 Notebook PC) (17-12-2023 19:11:13)
Exécuté depuis C:\Users\gabri\OneDrive\Bureau\FRST64.exe
Profils chargés: gabri
Plate-forme: Microsoft Windows 10 Professionnel Éducation Version 22H2 19045.3803 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.77\identity_helper.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.236.2.2\OverwolfHelper.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.236.2.2\OverwolfHelper64.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.236.2.2\OverwolfBrowser.exe <4>
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Users\gabri\AppData\Local\Overwolf\ProcessCache\0.236.2.2\cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj\curseforge.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrHostSvr.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> ) C:\Program Files\Malwarebytes\Anti-Malware\MBAMCrashHandler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(cmd.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxEMN.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Security Update Service\4.4.7.365\SecurityUpdateService.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BemSvc.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrService.exe
(services.exe ->) (Chickadee Digital, LLC -> Chickadee Digital LLC) C:\Program Files (x86)\OneBrowser\Update\OBUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_83b4a127df981b67\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_ed7f321251b7de5f\x64\hpsvcsscan.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_64d7fcfcde9b9c10\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_da775d7ecf291310\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_d7062aaa5ea58bcd\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (JBL) [Fichier non signé] C:\Program Files\JBL\QuantumENGINE\QuantumService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_285c9fb6a6c4e645\RtkAudUService64.exe <3>
(svchost.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrConsole.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe
(svchost.exe ->) (HP) [Fichier non signé] C:\Program Files (x86)\HP\HP ICS\ICS.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_285c9fb6a6c4e645\RtkAudUService64.exe [1951632 2023-10-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HPNotifications] => C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe [1608200 2020-07-23] (HP Inc. -> HP)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-12-01] (Adobe Inc. -> )
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [124599048 2021-08-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-12-01] (Adobe Inc. -> )
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1785864 2023-11-21] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\gabri\AppData\Local\Microsoft\Teams\Update.exe [2589872 2023-11-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [ProductAuthenticationService] => "C:\Users\gabri\AppData\Roaming\ProductAuthenticationService\pas.exe" /nogui (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [MicrosoftEdgeAutoLaunch_E366E5E6AF98057EB6410578BC1FD47F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854376 2023-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2637928 2023-08-23] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [Opera Stable] => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {8f4a9004-bb0a-11ec-b842-201e88065431} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {95ad290a-2e21-11ee-b8c1-201e88065431} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {d44f10ea-53be-11ed-b885-201e88065431} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {e98bd036-808f-11ee-b8d7-201e88065431} - "D:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.109\Installer\chrmstp.exe [2023-12-14] (Google LLC -> Google LLC)
AppInit_DLLs: C:\PROGRA~1\HP\SURECL~1\servers\BemHook.dll => C:\Program Files\HP\Sure Click\servers\BemHook.dll [1319272 2023-09-04] (Bromium, Inc. -> HP)
AppInit_DLLs-x32: C:\PROGRA~1\HP\SURECL~1\servers\BemHook32.dll => C:\Program Files\HP\Sure Click\servers\BemHook32.dll [1133416 2023-09-04] (Bromium, Inc. -> HP)
GroupPolicy: Restriction - Chrome <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {5D109245-B76D-4071-8593-4E0A62836A31} - \Microsoft\Windows\SMB\UninstallSMB1ServerTask -> Pas de fichier <==== ATTENTION
Task: {E179D655-7FE6-4C90-BDAD-BD065AB4D1FE} - \Microsoft\Windows\SMB\UninstallSMB1ClientTask -> Pas de fichier <==== ATTENTION
Task: {A009EBF6-EDA6-48F5-8D92-575A95B0943E} - System32\Tasks\Arrêt => C:\WINDOWS\system32\shutdown.exe [28160 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> /S
Task: {360BAD42-B0F9-44D6-8119-4604D9EDD242} - System32\Tasks\ChromsteraUpdater => C:\Program Files (x86)\Chromstera Browser Solutions\Chromstera Browser\ChromsteraUpdater.exe [1220408 2023-11-03] (Dragon Boss Solutions LLC -> Chromstera Browser Solutions) <==== ATTENTION
Task: {FD1FDF46-09EF-46FF-8673-D9B45045D879} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-29] (Google LLC -> Google LLC)
Task: {58616A51-2DB7-413A-8A7C-CB1A948EF99B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-29] (Google LLC -> Google LLC)
Task: {73EA641D-0425-4426-B3E7-30D59577F63A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [847392 2022-10-26] (HP Inc. -> HP Inc.)
Task: {4D022D15-7C11-4BF5-AFCC-0FE8D71ACCB8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-10-26] (HP Inc. -> HP Inc.)
Task: {08F5B7F9-597E-42F0-A0C8-E36B3790615E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-10-26] (HP Inc. -> HP Inc.)
Task: {9AA510D2-2BC2-4B36-9A51-7A179C51F70E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-10-26] (HP Inc. -> HP Inc.)
Task: {461BD06F-B6A6-41E8-A2F4-B145BF134ECB} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {1B5462C8-06CC-4D84-9E12-803E7C2F5D2E} - System32\Tasks\HP\HP ICS\ICS => C:\Program Files (x86)\HP\HP ICS\ICS.exe [76824576 2022-05-06] (HP) [Fichier non signé]
Task: {C2F9F6BF-D71C-4835-A3B7-40323B8805DD} - System32\Tasks\HP\HP Support Assistant\PC Health Analysis Restart => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPUpdate\HPUpdate.exe [991816 2022-10-26] (HP Inc. -> HP Inc.)
Task: {B009035E-F5F6-4C6C-A8F1-26F16BC9128D} - System32\Tasks\HP\HP Wolf Security\Launch Console => C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe [263664 2023-09-22] (HP Inc. -> HP Inc.)
Task: {186D2DF9-CC66-41DC-B08A-E83DD354A39B} - System32\Tasks\HP\Sure Click\Sure Click 4.4.7.365 => C:\Program Files\HP\Sure Click\servers\BrLauncher.exe [2685800 2023-09-04] (Bromium, Inc. -> HP)
Task: {ADE05F2B-5E8D-4FBF-8396-6BF58518A43B} - System32\Tasks\HP\Sure Click\Sure Click UI 4.4.7.365 => C:\Program Files\HP\Sure Click\servers\BrConsole.exe [142184 2023-09-04] (Bromium, Inc. -> HP)
Task: {1616E27D-EAF4-4625-8326-180105B8EB53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {31CD722B-9EFE-41E4-88F2-C3109FA928F7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E7DD6D3F-CAD7-429E-8EA2-D6CCD9D49B40} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {8BED3B92-CC74-4F46-A9FE-87161F92378C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E41496FB-1B56-4F0C-AE2E-A25E30AB014F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169144 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5FDFA54-4AF0-4865-8E75-48528396998A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C1A183DE-03CF-4A71-B9F3-8DBB6E67D65C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE0ABB47-4990-4AE7-AF45-F6392D3669C5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CACAC0D3-3534-40A4-A136-743D0C13D887} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0ED4C49D-B472-4ACD-8485-7BCF6F06751A} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6000FFC7-9B6E-44B5-BB39-E7F511829997} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {60D1299C-2F43-4373-AC96-8A3B3394BF66} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E59E6F5B-32C0-4D30-8024-A852C245AB8A} - System32\Tasks\Opera scheduled assistant Autoupdate 1666025665 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\gabri\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {7EDC5B6B-CA4F-45BC-B6E7-45AFB4592E7A} - System32\Tasks\Opera scheduled Autoupdate 1637705265 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
Task: {DE327C39-2319-4A15-95A1-6E0EC65C6630} - System32\Tasks\Opera scheduled Autoupdate 1702770463 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
Task: {F61EC189-3ADE-4339-8307-9CEAD80A0A24} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2641928 2023-11-21] (Overwolf Ltd -> Overwolf LTD)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{19c43c35-7da0-45f8-a6e5-daf71c064f56}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-17]
Edge Notifications: Default -> hxxps://aternos.org; hxxps://fr.statista.com; hxxps://goodcaptchastyle.top; hxxps://moonst.click; hxxps://phenotypebest.com; hxxps://teams.microsoft.com; hxxps://www.duolingo.com; hxxps://www24.orvilleandrea.pro; hxxps://www30.nathanaeldan.pro
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-12-17]
Edge Extension: (Soundboost) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dkikhdfackggojmdlepdlkpdgjmahjgb [2023-08-20]
Edge Extension: (VidRate) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hklfpjhpaebfnmddmcihamgfmoeeginn [2023-12-16]
Edge Extension: (Edge relevant text changes) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-16]
Edge Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-12-13]
Edge Extension: (Coupert - Codes Promo Automatiques & Cashback) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pefhciejnkgdgoahgfeklebcbpmhnhhd [2023-12-16]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [higpnoljpaemfcigigkloljenhlcaekd] - C:\\Users\\gabri\\AppData\\Local\\apps.crx [2023-11-09]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.321.2 -> C:\Program Files\Java\jre1.8.0_321\bin\dtplugin\npDeployJava1.dll [2022-02-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.321.2 -> C:\Program Files\Java\jre1.8.0_321\bin\plugin2\npjp2.dll [2022-02-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default [2023-12-17]
CHR Extension: (Adblock360) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjchineajlfhdlaonabjhlllhmdlmdc [2022-11-11]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2023-12-06]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2023-10-11]
CHR Extension: (Google Docs Offline) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17]
CHR Extension: (AdBlock for YouTube™) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpefmbpcbebpjpmelobfakahfdcgcmkl [2023-12-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-29]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [higpnoljpaemfcigigkloljenhlcaekd] - C:\\Users\\gabri\\AppData\\Local\\apps.crx [2023-11-09]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
OPR Profile: C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable [2023-12-17]
OPR Extension: (Rich Hints Agent) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-09-24]
OPR Extension: (Opera Wallet) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-09-24]
OPR Extension: (Aria) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2023-09-24]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-11-23]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-07-31] (BattlEye Innovations e.K. -> )
S4 BrAmSvc; C:\Program Files\HP\Sure Click\servers\BrAmSvc.exe [1934512 2023-09-04] (HP Inc -> HP)
R2 BrEndpointSvc; C:\Program Files\HP\Sure Click\servers\BemSvc.exe [4504424 2023-09-04] (Bromium, Inc. -> HP)
R2 BrService; c:\Program Files\HP\Sure Click\servers\BrService.exe [9843560 2023-09-04] (Bromium, Inc. -> HP)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13233744 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [10941544 2023-08-23] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-10-15] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [943528 2023-07-31] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncHelper.exe [3514384 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [482200 2022-08-25] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HotKeyServiceUWP.exe [1494472 2023-09-13] (HP Inc. -> HP Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\AppHelperCap.exe [887744 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HPAudioAnalytics.exe [542664 2023-09-13] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\DiagsCap.exe [886824 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\NetworkCap.exe [882728 2023-10-25] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149448 2020-07-23] (HP Inc. -> HP)
R2 hpsvcsscan; C:\WINDOWS\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_ed7f321251b7de5f\x64\hpsvcsscan.exe [6959760 2023-10-06] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\SysInfoCap.exe [886824 2023-10-25] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_83b4a127df981b67\x64\TouchpointAnalyticsClientService.exe [491760 2023-10-23] (HP Inc. -> HP Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_d7062aaa5ea58bcd\AS\IAS\IntelAudioService.exe [532024 2022-08-10] (Intel Corporation -> Intel)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\LanWlanWwanSwitchingServiceUWP.exe [606664 2023-09-13] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2023-12-17] (Malwarebytes Inc. -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [895152 2023-12-07] (McAfee, LLC -> McAfee, LLC)
R2 obupdate; C:\Program Files (x86)\OneBrowser\Update\OBUpdateService.exe [3306400 2023-11-04] (Chickadee Digital, LLC -> Chickadee Digital LLC)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\OneDriveUpdaterService.exe [3851280 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2641928 2023-11-21] (Overwolf Ltd -> Overwolf LTD)
R2 QuantumService; C:\Program Files\JBL\QuantumENGINE\QuantumService.exe [3256320 2022-12-10] (JBL) [Fichier non signé]
R2 SECOMNService; C:\WINDOWS\System32\SECOMN64.exe [751104 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.)
R2 SecurityUpdateService; C:\Program Files\HP\Security Update Service\4.4.7.365\SecurityUpdateService.exe [4506984 2023-09-04] (Bromium, Inc. -> HP)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MobiGameUpdater; "C:\Program Files\MobiGame\MobiGameUpdater.exe" [X]
S3 OneBrowserElevationService; "C:\Program Files (x86)\OneBrowser\Application\115.0.5790.171\elevation_service.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [526848 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S4 BrCow_4_4_7_365; C:\WINDOWS\System32\DRIVERS\BrCow_4_4_7_365.sys [71208 2023-09-04] (Bromium, Inc. -> Windows (R) Win 7 DDK provider)
S4 BrFilter_4_4_7_365; C:\WINDOWS\System32\DRIVERS\BrFilter_4_4_7_365.sys [231464 2023-09-04] (Bromium, Inc. -> HP)
S3 GSCAuxDriver; C:\WINDOWS\System32\DriverStore\FileRepository\gscauxdriver.inf_amd64_c88f56fe4c2427d9\GSCAuxDriverx64.sys [76568 2021-03-09] (Intel(R) pGFX 2020 -> Intel Corporation)
S3 GSCx64; C:\WINDOWS\System32\DriverStore\FileRepository\gscheci.inf_amd64_8eebd147e5c5a413\TeeDriverGSCW8x64.sys [251672 2021-03-09] (Intel(R) pGFX 2020 -> Intel Corporation)
S3 HarmanAudioService; C:\WINDOWS\System32\drivers\HarmanFilter.sys [63656 2022-12-10] (Harman International Industries, Inc -> Harman International)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_2546dafe2183e972\iaLPSS2_GPIO2_TGL.sys [131224 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_1308f85f1b0adf27\iaLPSS2_I2C_TGL.sys [204440 2021-07-19] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_dae60954c36e87c0\iaLPSS2_SPI_TGL.sys [155808 2021-02-04] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_0b4251313af34984\iaLPSS2_UART2_TGL.sys [310432 2021-02-04] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_aa617d40bf7b81ea\IntcUSB.sys [907320 2022-08-10] (Intel Corporation -> Intel(R) Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222784 2023-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-12-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2023-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 sselam_4_4_2_453; C:\WINDOWS\System32\DRIVERS\sselam_4_4_2_453.sys [19384 2023-09-04] (Microsoft Windows Early Launch Anti-malware Publisher -> HP)
S3 VoiceAIDriver; C:\WINDOWS\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.sys [73616 2023-06-20] (Voice AI LLC -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-17] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_f8dbb140e86553d1\WiManH\WiManH.sys [180304 2022-12-20] (Intel Corporation -> Intel Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
U3 aswbdisk; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-12-17 18:21 - 2023-12-17 18:22 - 000084543 _____ C:\Users\gabri\OneDrive\Bureau\Addition.txt
2023-12-17 18:20 - 2023-12-17 19:11 - 000037005 _____ C:\Users\gabri\OneDrive\Bureau\FRST.txt
2023-12-17 18:19 - 2023-12-17 19:11 - 000000000 ____D C:\FRST
2023-12-17 18:15 - 2023-12-17 18:15 - 000011942 __RSH C:\ProgramData\ntuser.pol
2023-12-17 17:39 - 2023-12-17 17:39 - 002387456 _____ (Farbar) C:\Users\gabri\OneDrive\Bureau\FRST64.exe
2023-12-17 17:39 - 2023-12-17 17:39 - 002387456 _____ (Farbar) C:\Users\gabri\Downloads\FRST64.exe
2023-12-17 16:28 - 2023-12-17 16:28 - 000008446 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner.txt
2023-12-17 16:24 - 2023-12-17 16:24 - 000017116 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (R).html
2023-12-17 16:24 - 2023-12-17 16:24 - 000008446 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (R).txt
2023-12-17 15:56 - 2023-12-17 15:56 - 000016634 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (S).html
2023-12-17 15:56 - 2023-12-17 15:56 - 000008088 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (S).txt
2023-12-17 15:40 - 2023-12-17 15:40 - 000000889 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner.lnk
2023-12-17 15:31 - 2023-12-17 15:31 - 003362976 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPCleaner (1).exe
2023-12-17 12:51 - 2023-12-17 12:52 - 003362976 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPCleaner.exe
2023-12-17 11:35 - 2023-12-17 11:35 - 003368608 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPDiag3.exe
2023-12-17 11:30 - 2023-12-17 11:30 - 000133570 _____ C:\Users\gabri\OneDrive\Bureau\Rapport MalwareBytes 171223.txt
2023-12-17 11:20 - 2023-12-17 11:20 - 000000000 ____D C:\Users\gabri\AppData\Local\mbam
2023-12-17 11:19 - 2023-12-17 18:15 - 000000000 ____D C:\Users\gabri\AppData\Local\Malwarebytes
2023-12-17 11:19 - 2023-12-17 11:19 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2023-12-17 11:17 - 2023-12-17 11:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2023-12-17 11:17 - 2023-12-17 11:17 - 000000000 ____D C:\Program Files\Malwarebytes
2023-12-17 11:13 - 2023-12-17 11:13 - 000002294 _____ C:\Users\gabri\OneDrive\Bureau\AdwCleaner[C00].txt
2023-12-17 11:09 - 2023-12-17 11:10 - 000000000 ____D C:\AdwCleaner
2023-12-17 10:36 - 2023-12-17 00:50 - 003368608 _____ (Nicolas Coolman) C:\Users\gabri\OneDrive\Bureau\ZHPDiag3.exe
2023-12-17 10:35 - 2023-12-17 10:35 - 002606880 _____ (Malwarebytes) C:\Users\gabri\OneDrive\Bureau\MBSetup.exe
2023-12-17 10:35 - 2023-12-17 10:35 - 002606880 _____ (Malwarebytes) C:\Users\gabri\Downloads\MBSetup.exe
2023-12-17 10:33 - 2023-12-17 10:33 - 008791352 _____ (Malwarebytes) C:\Users\gabri\OneDrive\Bureau\adwcleaner_8.4.0.exe
2023-12-17 10:33 - 2023-12-17 10:33 - 008791352 _____ (Malwarebytes) C:\Users\gabri\Downloads\adwcleaner_8.4.0.exe
2023-12-17 01:23 - 2023-12-17 01:23 - 000457088 _____ C:\Users\gabri\Downloads\ZHPDiag.txt
2023-12-17 01:03 - 2023-12-17 12:02 - 000460815 _____ C:\Users\gabri\OneDrive\Bureau\ZHPDiag.txt
2023-12-17 00:53 - 2023-12-17 16:24 - 000000000 ____D C:\Users\gabri\AppData\Roaming\ZHP
2023-12-17 00:53 - 2023-12-17 11:34 - 000000879 _____ C:\Users\gabri\OneDrive\Bureau\ZHPDiag.lnk
2023-12-17 00:53 - 2023-12-17 10:30 - 000000000 ____D C:\Users\gabri\AppData\Local\ZHP
2023-12-17 00:47 - 2023-12-17 00:47 - 000004206 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1702770463
2023-12-17 00:47 - 2023-12-17 00:47 - 000001427 _____ C:\Users\gabri\OneDrive\Bureau\Navigateur Opera.lnk
2023-12-17 00:47 - 2023-12-17 00:47 - 000001411 _____ C:\Users\gabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2023-12-14 00:28 - 2023-12-14 00:28 - 000000000 ____D C:\WINDOWS\InboxApps
2023-12-13 18:56 - 2023-12-13 18:56 - 000016707 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2023-12-13 18:46 - 2023-12-13 18:46 - 000000000 ___HD C:\$WinREAgent
2023-12-13 00:38 - 2023-12-13 00:38 - 000012894 _____ C:\Users\gabri\OneDrive\Documents\Classeur11111.xlsx
2023-12-07 17:21 - 2023-12-17 18:16 - 000011196 _____ C:\Users\gabri\AppData\LocalLow\86cda845fb34fc8d76e06b3c2457ab8b8652e36ebdfd4e83d1179764c3415a32
2023-12-07 17:21 - 2023-12-07 17:21 - 000000026 _____ C:\Users\gabri\AppData\LocalLow\8e7a3032b72e3c3056869f127cb80e8d7a2aa2aeb0c07838a52f15afbf151616
2023-12-05 00:38 - 2023-12-05 00:38 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-12-02 00:53 - 2023-12-13 22:52 - 000014908 _____ C:\Users\gabri\OneDrive\Bureau\Classeur1.xlsx
2023-11-30 00:31 - 2023-11-30 00:31 - 000032047 _____ C:\Users\gabri\Downloads\7IT02TEWB0121_Feuille de route.pdf
2023-11-27 18:59 - 2023-10-19 07:22 - 000606768 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2023-11-27 18:59 - 2023-10-19 07:22 - 000537352 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2023-11-27 18:59 - 2023-10-19 07:21 - 000979072 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2023-11-27 18:59 - 2023-10-19 07:21 - 000737904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000621728 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000542984 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000480736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 027983968 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 020708040 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000871000 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000871000 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000751920 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000751920 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000683720 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000683720 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000669280 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000669280 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000538200 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000535856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000486080 _____ C:\WINDOWS\system32\ze_loader.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000326752 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2023-11-27 18:59 - 2023-10-19 07:13 - 000398536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-11-27 18:59 - 2023-10-19 07:12 - 000306752 _____ C:\WINDOWS\system32\ControlLib.dll
2023-11-27 18:59 - 2023-10-19 07:12 - 000254232 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll
2023-11-23 21:38 - 2023-11-23 21:38 - 000157731 _____ C:\Users\gabri\Downloads\CNED ROLLAND Gabriel (1).pdf
2023-11-23 21:36 - 2023-11-23 21:36 - 000157731 _____ C:\Users\gabri\Downloads\CNED ROLLAND Gabriel.pdf
2023-11-19 01:00 - 2023-11-19 01:00 - 000018372 _____ C:\Users\gabri\Downloads\texte 4 le voyage des pays.odt
2023-11-19 00:58 - 2023-11-19 00:58 - 000019559 _____ C:\Users\gabri\Downloads\texte 3 le voyage des pays.odt
2023-11-19 00:58 - 2023-11-19 00:58 - 000019559 _____ C:\Users\gabri\Downloads\texte 3 le voyage des pays (1).odt
2023-11-19 00:51 - 2023-11-19 00:51 - 000018409 _____ C:\Users\gabri\Downloads\Livret de Généalogie Famille de Gabriel Rolland.odt
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-12-17 19:08 - 2021-11-21 23:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-12-17 18:31 - 2021-12-22 02:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-12-17 18:31 - 2021-11-29 21:03 - 000000000 ____D C:\Program Files (x86)\Google
2023-12-17 18:19 - 2021-12-13 19:21 - 000418658 _____ C:\WINDOWS\system32\prfh0804.dat
2023-12-17 18:19 - 2021-12-13 19:21 - 000133350 _____ C:\WINDOWS\system32\prfc0804.dat
2023-12-17 18:19 - 2021-11-22 00:26 - 000794628 _____ C:\WINDOWS\system32\perfh00C.dat
2023-12-17 18:19 - 2021-11-22 00:26 - 000150742 _____ C:\WINDOWS\system32\perfc00C.dat
2023-12-17 18:19 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\INF
2023-12-17 18:19 - 2021-11-22 00:05 - 002321402 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-12-17 18:18 - 2023-05-03 08:12 - 000000000 ____D C:\Users\gabri\AppData\Roaming\ReasonLabs
2023-12-17 18:18 - 2023-02-06 17:35 - 000000000 ____D C:\Program Files\ReasonLabs
2023-12-17 18:18 - 2021-11-22 00:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-12-17 18:16 - 2021-11-22 00:26 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-12-17 18:15 - 2021-12-05 16:28 - 000000000 ____D C:\Users\gabri\AppData\Local\Overwolf
2023-12-17 18:15 - 2021-11-22 00:20 - 000000000 __SHD C:\Users\gabri\IntelGraphicsProfiles
2023-12-17 18:14 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-12-17 18:14 - 2021-11-22 00:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-17 18:14 - 2021-11-21 23:47 - 000008192 ___SH C:\DumpStack.log.tmp
2023-12-17 18:14 - 2021-11-21 23:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-12-17 18:14 - 2021-11-21 23:47 - 000000000 ___HD C:\Intel
2023-12-17 18:09 - 2021-11-21 23:47 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-12-17 18:06 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-12-17 17:16 - 2021-11-22 00:20 - 000000000 ____D C:\Users\gabri\AppData\Local\Packages
2023-12-17 14:18 - 2021-12-13 12:13 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Teams
2023-12-17 11:18 - 2021-11-22 00:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-12-17 11:17 - 2021-11-22 00:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-17 10:59 - 2021-12-01 21:06 - 000000000 ____D C:\Users\gabri\AppData\Local\CrashDumps
2023-12-17 10:27 - 2021-12-22 19:59 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\PowerPoint
2023-12-17 10:26 - 2022-12-01 22:56 - 000051923 _____ C:\Users\gabri\OneDrive\Bureau\maisons chateau minecraft.pptx
2023-12-17 01:05 - 2021-11-22 00:28 - 000000000 ____D C:\Users\gabri\AppData\Local\D3DSCache
2023-12-17 00:53 - 2021-11-22 00:27 - 000000000 ____D C:\Users\gabri\AppData\Roaming\.tlauncher
2023-12-17 00:47 - 2021-11-22 00:22 - 000000000 ____D C:\Users\gabri\AppData\Roaming\discord
2023-12-17 00:43 - 2021-11-22 00:27 - 000000000 ____D C:\Users\gabri\AppData\Roaming\.minecraft
2023-12-17 00:40 - 2022-12-11 19:56 - 000000000 ____D C:\Users\gabri\AppData\Local\Discord
2023-12-17 00:40 - 2021-11-28 20:02 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Word
2023-12-17 00:37 - 2022-07-28 13:57 - 000000000 ____D C:\Users\gabri\OneDrive\Bureau\Les Rois Européens Généalogie
2023-12-16 16:05 - 2021-12-13 18:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-12-16 06:03 - 2021-11-21 23:47 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-15 06:14 - 2021-12-12 10:24 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-12-15 06:14 - 2021-12-12 10:24 - 000002178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-12-15 06:14 - 2021-12-12 10:16 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1003
2023-12-14 00:34 - 2021-12-20 18:43 - 000002245 _____ C:\Users\gabri\OneDrive\Bureau\Discord.lnk
2023-12-14 00:33 - 2021-11-22 00:20 - 000000000 ____D C:\Users\gabri\AppData\Roaming\hpqLog
2023-12-14 00:32 - 2021-11-21 23:47 - 000610392 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-12-14 00:32 - 2021-08-16 03:36 - 000000000 ____D C:\ProgramData\Bromium
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-12-14 00:28 - 2021-11-22 00:21 - 000000000 ____D C:\WINDOWS\servicing
2023-12-13 22:52 - 2021-11-26 18:48 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Excel
2023-12-13 18:59 - 2021-11-22 00:21 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-12-13 18:58 - 2021-11-22 00:24 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-12-13 18:58 - 2021-11-22 00:24 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2023-12-13 18:56 - 2021-11-21 23:49 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-12-13 16:00 - 2020-05-05 21:05 - 000000000 ____D C:\ProgramData\Packages
2023-12-09 18:07 - 2023-08-31 18:52 - 000001409 _____ C:\Users\gabri\OneDrive\Bureau\Roblox Player.lnk
2023-12-09 18:07 - 2023-05-14 11:17 - 000001237 _____ C:\Users\gabri\OneDrive\Bureau\Roblox Studio.lnk
2023-12-09 18:07 - 2023-05-14 11:17 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2023-12-08 00:54 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-12-07 04:26 - 2021-11-29 21:03 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-12-07 04:26 - 2021-11-29 21:03 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-12-05 00:39 - 2021-11-22 00:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-12-05 00:39 - 2021-08-16 03:34 - 000000000 ____D C:\Program Files\Microsoft Office
2023-12-03 23:20 - 2023-11-08 17:07 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2023-12-03 23:20 - 2022-10-23 02:24 - 000095848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-12-03 23:20 - 2022-10-23 02:24 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-12-03 23:20 - 2021-12-05 16:44 - 002754152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000214632 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000194040 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-12-02 14:07 - 2021-12-20 18:27 - 000000000 ____D C:\Program Files\paint.net
2023-12-02 00:53 - 2023-10-09 21:18 - 000042698 _____ C:\Users\gabri\OneDrive\Documents\edt s.xlsx
2023-11-29 12:59 - 2021-12-05 16:29 - 000000000 ____D C:\Program Files (x86)\Overwolf
==================== Fichiers à la racine de certains dossiers ========
2021-11-27 01:43 - 2021-11-27 09:52 - 000028672 _____ () C:\Users\gabri\AppData\Roaming\crash.bin
2021-12-13 16:38 - 2021-12-13 16:38 - 000472756 _____ () C:\Users\gabri\AppData\Roaming\DreamPlan.dmp
2023-11-09 20:20 - 2023-11-09 20:20 - 000012118 _____ () C:\Users\gabri\AppData\Local\apps.crx
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par gabri (administrateur) sur 5CD132D2ZD (HP HP ProBook 440 G8 Notebook PC) (17-12-2023 19:11:13)
Exécuté depuis C:\Users\gabri\OneDrive\Bureau\FRST64.exe
Profils chargés: gabri
Plate-forme: Microsoft Windows 10 Professionnel Éducation Version 22H2 19045.3803 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.77\identity_helper.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.236.2.2\OverwolfHelper.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.236.2.2\OverwolfHelper64.exe
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.236.2.2\OverwolfBrowser.exe <4>
(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Users\gabri\AppData\Local\Overwolf\ProcessCache\0.236.2.2\cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj\curseforge.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\HP\Sure Click\servers\BrService.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrHostSvr.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> ) C:\Program Files\Malwarebytes\Anti-Malware\MBAMCrashHandler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(cmd.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxEMN.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Security Update Service\4.4.7.365\SecurityUpdateService.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BemSvc.exe
(services.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrService.exe
(services.exe ->) (Chickadee Digital, LLC -> Chickadee Digital LLC) C:\Program Files (x86)\OneBrowser\Update\OBUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_83b4a127df981b67\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_ed7f321251b7de5f\x64\hpsvcsscan.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cdc590c3a80bcce4\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_64d7fcfcde9b9c10\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_da775d7ecf291310\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_d7062aaa5ea58bcd\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (JBL) [Fichier non signé] C:\Program Files\JBL\QuantumENGINE\QuantumService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_285c9fb6a6c4e645\RtkAudUService64.exe <3>
(svchost.exe ->) (Bromium, Inc. -> HP) C:\Program Files\HP\Sure Click\servers\BrConsole.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe
(svchost.exe ->) (HP) [Fichier non signé] C:\Program Files (x86)\HP\HP ICS\ICS.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_285c9fb6a6c4e645\RtkAudUService64.exe [1951632 2023-10-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HPNotifications] => C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe [1608200 2020-07-23] (HP Inc. -> HP)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-12-01] (Adobe Inc. -> )
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [124599048 2021-08-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-12-01] (Adobe Inc. -> )
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1785864 2023-11-21] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\gabri\AppData\Local\Microsoft\Teams\Update.exe [2589872 2023-11-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [ProductAuthenticationService] => "C:\Users\gabri\AppData\Roaming\ProductAuthenticationService\pas.exe" /nogui (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [MicrosoftEdgeAutoLaunch_E366E5E6AF98057EB6410578BC1FD47F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854376 2023-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2637928 2023-08-23] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\Run: [Opera Stable] => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {8f4a9004-bb0a-11ec-b842-201e88065431} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {95ad290a-2e21-11ee-b8c1-201e88065431} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {d44f10ea-53be-11ed-b885-201e88065431} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030407711-1060188347-3593659480-1003\...\MountPoints2: {e98bd036-808f-11ee-b8d7-201e88065431} - "D:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.109\Installer\chrmstp.exe [2023-12-14] (Google LLC -> Google LLC)
AppInit_DLLs: C:\PROGRA~1\HP\SURECL~1\servers\BemHook.dll => C:\Program Files\HP\Sure Click\servers\BemHook.dll [1319272 2023-09-04] (Bromium, Inc. -> HP)
AppInit_DLLs-x32: C:\PROGRA~1\HP\SURECL~1\servers\BemHook32.dll => C:\Program Files\HP\Sure Click\servers\BemHook32.dll [1133416 2023-09-04] (Bromium, Inc. -> HP)
GroupPolicy: Restriction - Chrome <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {5D109245-B76D-4071-8593-4E0A62836A31} - \Microsoft\Windows\SMB\UninstallSMB1ServerTask -> Pas de fichier <==== ATTENTION
Task: {E179D655-7FE6-4C90-BDAD-BD065AB4D1FE} - \Microsoft\Windows\SMB\UninstallSMB1ClientTask -> Pas de fichier <==== ATTENTION
Task: {A009EBF6-EDA6-48F5-8D92-575A95B0943E} - System32\Tasks\Arrêt => C:\WINDOWS\system32\shutdown.exe [28160 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> /S
Task: {360BAD42-B0F9-44D6-8119-4604D9EDD242} - System32\Tasks\ChromsteraUpdater => C:\Program Files (x86)\Chromstera Browser Solutions\Chromstera Browser\ChromsteraUpdater.exe [1220408 2023-11-03] (Dragon Boss Solutions LLC -> Chromstera Browser Solutions) <==== ATTENTION
Task: {FD1FDF46-09EF-46FF-8673-D9B45045D879} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-29] (Google LLC -> Google LLC)
Task: {58616A51-2DB7-413A-8A7C-CB1A948EF99B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-29] (Google LLC -> Google LLC)
Task: {73EA641D-0425-4426-B3E7-30D59577F63A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [847392 2022-10-26] (HP Inc. -> HP Inc.)
Task: {4D022D15-7C11-4BF5-AFCC-0FE8D71ACCB8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-10-26] (HP Inc. -> HP Inc.)
Task: {08F5B7F9-597E-42F0-A0C8-E36B3790615E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-10-26] (HP Inc. -> HP Inc.)
Task: {9AA510D2-2BC2-4B36-9A51-7A179C51F70E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-10-26] (HP Inc. -> HP Inc.)
Task: {461BD06F-B6A6-41E8-A2F4-B145BF134ECB} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {1B5462C8-06CC-4D84-9E12-803E7C2F5D2E} - System32\Tasks\HP\HP ICS\ICS => C:\Program Files (x86)\HP\HP ICS\ICS.exe [76824576 2022-05-06] (HP) [Fichier non signé]
Task: {C2F9F6BF-D71C-4835-A3B7-40323B8805DD} - System32\Tasks\HP\HP Support Assistant\PC Health Analysis Restart => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPUpdate\HPUpdate.exe [991816 2022-10-26] (HP Inc. -> HP Inc.)
Task: {B009035E-F5F6-4C6C-A8F1-26F16BC9128D} - System32\Tasks\HP\HP Wolf Security\Launch Console => C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe [263664 2023-09-22] (HP Inc. -> HP Inc.)
Task: {186D2DF9-CC66-41DC-B08A-E83DD354A39B} - System32\Tasks\HP\Sure Click\Sure Click 4.4.7.365 => C:\Program Files\HP\Sure Click\servers\BrLauncher.exe [2685800 2023-09-04] (Bromium, Inc. -> HP)
Task: {ADE05F2B-5E8D-4FBF-8396-6BF58518A43B} - System32\Tasks\HP\Sure Click\Sure Click UI 4.4.7.365 => C:\Program Files\HP\Sure Click\servers\BrConsole.exe [142184 2023-09-04] (Bromium, Inc. -> HP)
Task: {1616E27D-EAF4-4625-8326-180105B8EB53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {31CD722B-9EFE-41E4-88F2-C3109FA928F7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E7DD6D3F-CAD7-429E-8EA2-D6CCD9D49B40} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {8BED3B92-CC74-4F46-A9FE-87161F92378C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E41496FB-1B56-4F0C-AE2E-A25E30AB014F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169144 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5FDFA54-4AF0-4865-8E75-48528396998A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C1A183DE-03CF-4A71-B9F3-8DBB6E67D65C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE0ABB47-4990-4AE7-AF45-F6392D3669C5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CACAC0D3-3534-40A4-A136-743D0C13D887} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0ED4C49D-B472-4ACD-8485-7BCF6F06751A} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {6000FFC7-9B6E-44B5-BB39-E7F511829997} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {60D1299C-2F43-4373-AC96-8A3B3394BF66} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E59E6F5B-32C0-4D30-8024-A852C245AB8A} - System32\Tasks\Opera scheduled assistant Autoupdate 1666025665 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\gabri\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {7EDC5B6B-CA4F-45BC-B6E7-45AFB4592E7A} - System32\Tasks\Opera scheduled Autoupdate 1637705265 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
Task: {DE327C39-2319-4A15-95A1-6E0EC65C6630} - System32\Tasks\Opera scheduled Autoupdate 1702770463 => C:\Users\gabri\AppData\Local\Programs\Opera\launcher.exe [2353056 2023-12-13] (Opera Norway AS -> Opera Software)
Task: {F61EC189-3ADE-4339-8307-9CEAD80A0A24} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2641928 2023-11-21] (Overwolf Ltd -> Overwolf LTD)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{19c43c35-7da0-45f8-a6e5-daf71c064f56}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-17]
Edge Notifications: Default -> hxxps://aternos.org; hxxps://fr.statista.com; hxxps://goodcaptchastyle.top; hxxps://moonst.click; hxxps://phenotypebest.com; hxxps://teams.microsoft.com; hxxps://www.duolingo.com; hxxps://www24.orvilleandrea.pro; hxxps://www30.nathanaeldan.pro
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-12-17]
Edge Extension: (Soundboost) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dkikhdfackggojmdlepdlkpdgjmahjgb [2023-08-20]
Edge Extension: (VidRate) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hklfpjhpaebfnmddmcihamgfmoeeginn [2023-12-16]
Edge Extension: (Edge relevant text changes) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-16]
Edge Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-12-13]
Edge Extension: (Coupert - Codes Promo Automatiques & Cashback) - C:\Users\gabri\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pefhciejnkgdgoahgfeklebcbpmhnhhd [2023-12-16]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [higpnoljpaemfcigigkloljenhlcaekd] - C:\\Users\\gabri\\AppData\\Local\\apps.crx [2023-11-09]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.321.2 -> C:\Program Files\Java\jre1.8.0_321\bin\dtplugin\npDeployJava1.dll [2022-02-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.321.2 -> C:\Program Files\Java\jre1.8.0_321\bin\plugin2\npjp2.dll [2022-02-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default [2023-12-17]
CHR Extension: (Adblock360) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjchineajlfhdlaonabjhlllhmdlmdc [2022-11-11]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2023-12-06]
CHR Extension: (Total Adblock - Ad Blocker) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gekdekpbfehejjiecgonmgmepbdnaggp [2023-10-11]
CHR Extension: (Google Docs Offline) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17]
CHR Extension: (AdBlock for YouTube™) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpefmbpcbebpjpmelobfakahfdcgcmkl [2023-12-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\gabri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-29]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [higpnoljpaemfcigigkloljenhlcaekd] - C:\\Users\\gabri\\AppData\\Local\\apps.crx [2023-11-09]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
OPR Profile: C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable [2023-12-17]
OPR Extension: (Rich Hints Agent) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-09-24]
OPR Extension: (Opera Wallet) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-09-24]
OPR Extension: (Aria) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\igpdmclhhlcpoindmhkhillbfhdgoegm [2023-09-24]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\gabri\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-11-23]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [15044872 2023-07-31] (BattlEye Innovations e.K. -> )
S4 BrAmSvc; C:\Program Files\HP\Sure Click\servers\BrAmSvc.exe [1934512 2023-09-04] (HP Inc -> HP)
R2 BrEndpointSvc; C:\Program Files\HP\Sure Click\servers\BemSvc.exe [4504424 2023-09-04] (Bromium, Inc. -> HP)
R2 BrService; c:\Program Files\HP\Sure Click\servers\BrService.exe [9843560 2023-09-04] (Bromium, Inc. -> HP)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13233744 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [10941544 2023-08-23] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-10-15] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [943528 2023-07-31] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncHelper.exe [3514384 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [482200 2022-08-25] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HotKeyServiceUWP.exe [1494472 2023-09-13] (HP Inc. -> HP Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\AppHelperCap.exe [887744 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\HPAudioAnalytics.exe [542664 2023-09-13] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\DiagsCap.exe [886824 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\NetworkCap.exe [882728 2023-10-25] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149448 2020-07-23] (HP Inc. -> HP)
R2 hpsvcsscan; C:\WINDOWS\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_ed7f321251b7de5f\x64\hpsvcsscan.exe [6959760 2023-10-06] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_b0931ab6230d32f6\x64\SysInfoCap.exe [886824 2023-10-25] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_83b4a127df981b67\x64\TouchpointAnalyticsClientService.exe [491760 2023-10-23] (HP Inc. -> HP Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_d7062aaa5ea58bcd\AS\IAS\IntelAudioService.exe [532024 2022-08-10] (Intel Corporation -> Intel)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_02c16d71fe8a4b6a\LanWlanWwanSwitchingServiceUWP.exe [606664 2023-09-13] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2023-12-17] (Malwarebytes Inc. -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [895152 2023-12-07] (McAfee, LLC -> McAfee, LLC)
R2 obupdate; C:\Program Files (x86)\OneBrowser\Update\OBUpdateService.exe [3306400 2023-11-04] (Chickadee Digital, LLC -> Chickadee Digital LLC)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\OneDriveUpdaterService.exe [3851280 2023-12-15] (Microsoft Corporation -> Microsoft Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2641928 2023-11-21] (Overwolf Ltd -> Overwolf LTD)
R2 QuantumService; C:\Program Files\JBL\QuantumENGINE\QuantumService.exe [3256320 2022-12-10] (JBL) [Fichier non signé]
R2 SECOMNService; C:\WINDOWS\System32\SECOMN64.exe [751104 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.)
R2 SecurityUpdateService; C:\Program Files\HP\Security Update Service\4.4.7.365\SecurityUpdateService.exe [4506984 2023-09-04] (Bromium, Inc. -> HP)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MobiGameUpdater; "C:\Program Files\MobiGame\MobiGameUpdater.exe" [X]
S3 OneBrowserElevationService; "C:\Program Files (x86)\OneBrowser\Application\115.0.5790.171\elevation_service.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [526848 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S4 BrCow_4_4_7_365; C:\WINDOWS\System32\DRIVERS\BrCow_4_4_7_365.sys [71208 2023-09-04] (Bromium, Inc. -> Windows (R) Win 7 DDK provider)
S4 BrFilter_4_4_7_365; C:\WINDOWS\System32\DRIVERS\BrFilter_4_4_7_365.sys [231464 2023-09-04] (Bromium, Inc. -> HP)
S3 GSCAuxDriver; C:\WINDOWS\System32\DriverStore\FileRepository\gscauxdriver.inf_amd64_c88f56fe4c2427d9\GSCAuxDriverx64.sys [76568 2021-03-09] (Intel(R) pGFX 2020 -> Intel Corporation)
S3 GSCx64; C:\WINDOWS\System32\DriverStore\FileRepository\gscheci.inf_amd64_8eebd147e5c5a413\TeeDriverGSCW8x64.sys [251672 2021-03-09] (Intel(R) pGFX 2020 -> Intel Corporation)
S3 HarmanAudioService; C:\WINDOWS\System32\drivers\HarmanFilter.sys [63656 2022-12-10] (Harman International Industries, Inc -> Harman International)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_2546dafe2183e972\iaLPSS2_GPIO2_TGL.sys [131224 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_1308f85f1b0adf27\iaLPSS2_I2C_TGL.sys [204440 2021-07-19] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_dae60954c36e87c0\iaLPSS2_SPI_TGL.sys [155808 2021-02-04] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_0b4251313af34984\iaLPSS2_UART2_TGL.sys [310432 2021-02-04] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_aa617d40bf7b81ea\IntcUSB.sys [907320 2022-08-10] (Intel Corporation -> Intel(R) Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222784 2023-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-12-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2023-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 sselam_4_4_2_453; C:\WINDOWS\System32\DRIVERS\sselam_4_4_2_453.sys [19384 2023-09-04] (Microsoft Windows Early Launch Anti-malware Publisher -> HP)
S3 VoiceAIDriver; C:\WINDOWS\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.sys [73616 2023-06-20] (Voice AI LLC -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-17] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_f8dbb140e86553d1\WiManH\WiManH.sys [180304 2022-12-20] (Intel Corporation -> Intel Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
U3 aswbdisk; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-12-17 18:21 - 2023-12-17 18:22 - 000084543 _____ C:\Users\gabri\OneDrive\Bureau\Addition.txt
2023-12-17 18:20 - 2023-12-17 19:11 - 000037005 _____ C:\Users\gabri\OneDrive\Bureau\FRST.txt
2023-12-17 18:19 - 2023-12-17 19:11 - 000000000 ____D C:\FRST
2023-12-17 18:15 - 2023-12-17 18:15 - 000011942 __RSH C:\ProgramData\ntuser.pol
2023-12-17 17:39 - 2023-12-17 17:39 - 002387456 _____ (Farbar) C:\Users\gabri\OneDrive\Bureau\FRST64.exe
2023-12-17 17:39 - 2023-12-17 17:39 - 002387456 _____ (Farbar) C:\Users\gabri\Downloads\FRST64.exe
2023-12-17 16:28 - 2023-12-17 16:28 - 000008446 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner.txt
2023-12-17 16:24 - 2023-12-17 16:24 - 000017116 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (R).html
2023-12-17 16:24 - 2023-12-17 16:24 - 000008446 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (R).txt
2023-12-17 15:56 - 2023-12-17 15:56 - 000016634 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (S).html
2023-12-17 15:56 - 2023-12-17 15:56 - 000008088 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner (S).txt
2023-12-17 15:40 - 2023-12-17 15:40 - 000000889 _____ C:\Users\gabri\OneDrive\Bureau\ZHPCleaner.lnk
2023-12-17 15:31 - 2023-12-17 15:31 - 003362976 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPCleaner (1).exe
2023-12-17 12:51 - 2023-12-17 12:52 - 003362976 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPCleaner.exe
2023-12-17 11:35 - 2023-12-17 11:35 - 003368608 _____ (Nicolas Coolman) C:\Users\gabri\Downloads\ZHPDiag3.exe
2023-12-17 11:30 - 2023-12-17 11:30 - 000133570 _____ C:\Users\gabri\OneDrive\Bureau\Rapport MalwareBytes 171223.txt
2023-12-17 11:20 - 2023-12-17 11:20 - 000000000 ____D C:\Users\gabri\AppData\Local\mbam
2023-12-17 11:19 - 2023-12-17 18:15 - 000000000 ____D C:\Users\gabri\AppData\Local\Malwarebytes
2023-12-17 11:19 - 2023-12-17 11:19 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2023-12-17 11:17 - 2023-12-17 11:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2023-12-17 11:17 - 2023-12-17 11:17 - 000000000 ____D C:\Program Files\Malwarebytes
2023-12-17 11:13 - 2023-12-17 11:13 - 000002294 _____ C:\Users\gabri\OneDrive\Bureau\AdwCleaner[C00].txt
2023-12-17 11:09 - 2023-12-17 11:10 - 000000000 ____D C:\AdwCleaner
2023-12-17 10:36 - 2023-12-17 00:50 - 003368608 _____ (Nicolas Coolman) C:\Users\gabri\OneDrive\Bureau\ZHPDiag3.exe
2023-12-17 10:35 - 2023-12-17 10:35 - 002606880 _____ (Malwarebytes) C:\Users\gabri\OneDrive\Bureau\MBSetup.exe
2023-12-17 10:35 - 2023-12-17 10:35 - 002606880 _____ (Malwarebytes) C:\Users\gabri\Downloads\MBSetup.exe
2023-12-17 10:33 - 2023-12-17 10:33 - 008791352 _____ (Malwarebytes) C:\Users\gabri\OneDrive\Bureau\adwcleaner_8.4.0.exe
2023-12-17 10:33 - 2023-12-17 10:33 - 008791352 _____ (Malwarebytes) C:\Users\gabri\Downloads\adwcleaner_8.4.0.exe
2023-12-17 01:23 - 2023-12-17 01:23 - 000457088 _____ C:\Users\gabri\Downloads\ZHPDiag.txt
2023-12-17 01:03 - 2023-12-17 12:02 - 000460815 _____ C:\Users\gabri\OneDrive\Bureau\ZHPDiag.txt
2023-12-17 00:53 - 2023-12-17 16:24 - 000000000 ____D C:\Users\gabri\AppData\Roaming\ZHP
2023-12-17 00:53 - 2023-12-17 11:34 - 000000879 _____ C:\Users\gabri\OneDrive\Bureau\ZHPDiag.lnk
2023-12-17 00:53 - 2023-12-17 10:30 - 000000000 ____D C:\Users\gabri\AppData\Local\ZHP
2023-12-17 00:47 - 2023-12-17 00:47 - 000004206 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1702770463
2023-12-17 00:47 - 2023-12-17 00:47 - 000001427 _____ C:\Users\gabri\OneDrive\Bureau\Navigateur Opera.lnk
2023-12-17 00:47 - 2023-12-17 00:47 - 000001411 _____ C:\Users\gabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2023-12-14 00:28 - 2023-12-14 00:28 - 000000000 ____D C:\WINDOWS\InboxApps
2023-12-13 18:56 - 2023-12-13 18:56 - 000016707 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2023-12-13 18:46 - 2023-12-13 18:46 - 000000000 ___HD C:\$WinREAgent
2023-12-13 00:38 - 2023-12-13 00:38 - 000012894 _____ C:\Users\gabri\OneDrive\Documents\Classeur11111.xlsx
2023-12-07 17:21 - 2023-12-17 18:16 - 000011196 _____ C:\Users\gabri\AppData\LocalLow\86cda845fb34fc8d76e06b3c2457ab8b8652e36ebdfd4e83d1179764c3415a32
2023-12-07 17:21 - 2023-12-07 17:21 - 000000026 _____ C:\Users\gabri\AppData\LocalLow\8e7a3032b72e3c3056869f127cb80e8d7a2aa2aeb0c07838a52f15afbf151616
2023-12-05 00:38 - 2023-12-05 00:38 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-12-02 00:53 - 2023-12-13 22:52 - 000014908 _____ C:\Users\gabri\OneDrive\Bureau\Classeur1.xlsx
2023-11-30 00:31 - 2023-11-30 00:31 - 000032047 _____ C:\Users\gabri\Downloads\7IT02TEWB0121_Feuille de route.pdf
2023-11-27 18:59 - 2023-10-19 07:22 - 000606768 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2023-11-27 18:59 - 2023-10-19 07:22 - 000537352 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2023-11-27 18:59 - 2023-10-19 07:21 - 000979072 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2023-11-27 18:59 - 2023-10-19 07:21 - 000737904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000621728 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000542984 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll
2023-11-27 18:59 - 2023-10-19 07:20 - 000480736 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 027983968 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 020708040 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000871000 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000871000 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000751920 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000751920 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-11-27 18:59 - 2023-10-19 07:14 - 000683720 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000683720 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000669280 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000669280 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000538200 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000535856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000486080 _____ C:\WINDOWS\system32\ze_loader.dll
2023-11-27 18:59 - 2023-10-19 07:14 - 000326752 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2023-11-27 18:59 - 2023-10-19 07:13 - 000398536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-11-27 18:59 - 2023-10-19 07:12 - 000306752 _____ C:\WINDOWS\system32\ControlLib.dll
2023-11-27 18:59 - 2023-10-19 07:12 - 000254232 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll
2023-11-23 21:38 - 2023-11-23 21:38 - 000157731 _____ C:\Users\gabri\Downloads\CNED ROLLAND Gabriel (1).pdf
2023-11-23 21:36 - 2023-11-23 21:36 - 000157731 _____ C:\Users\gabri\Downloads\CNED ROLLAND Gabriel.pdf
2023-11-19 01:00 - 2023-11-19 01:00 - 000018372 _____ C:\Users\gabri\Downloads\texte 4 le voyage des pays.odt
2023-11-19 00:58 - 2023-11-19 00:58 - 000019559 _____ C:\Users\gabri\Downloads\texte 3 le voyage des pays.odt
2023-11-19 00:58 - 2023-11-19 00:58 - 000019559 _____ C:\Users\gabri\Downloads\texte 3 le voyage des pays (1).odt
2023-11-19 00:51 - 2023-11-19 00:51 - 000018409 _____ C:\Users\gabri\Downloads\Livret de Généalogie Famille de Gabriel Rolland.odt
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-12-17 19:08 - 2021-11-21 23:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-12-17 18:31 - 2021-12-22 02:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-12-17 18:31 - 2021-11-29 21:03 - 000000000 ____D C:\Program Files (x86)\Google
2023-12-17 18:19 - 2021-12-13 19:21 - 000418658 _____ C:\WINDOWS\system32\prfh0804.dat
2023-12-17 18:19 - 2021-12-13 19:21 - 000133350 _____ C:\WINDOWS\system32\prfc0804.dat
2023-12-17 18:19 - 2021-11-22 00:26 - 000794628 _____ C:\WINDOWS\system32\perfh00C.dat
2023-12-17 18:19 - 2021-11-22 00:26 - 000150742 _____ C:\WINDOWS\system32\perfc00C.dat
2023-12-17 18:19 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\INF
2023-12-17 18:19 - 2021-11-22 00:05 - 002321402 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-12-17 18:18 - 2023-05-03 08:12 - 000000000 ____D C:\Users\gabri\AppData\Roaming\ReasonLabs
2023-12-17 18:18 - 2023-02-06 17:35 - 000000000 ____D C:\Program Files\ReasonLabs
2023-12-17 18:18 - 2021-11-22 00:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-12-17 18:16 - 2021-11-22 00:26 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-12-17 18:15 - 2021-12-05 16:28 - 000000000 ____D C:\Users\gabri\AppData\Local\Overwolf
2023-12-17 18:15 - 2021-11-22 00:20 - 000000000 __SHD C:\Users\gabri\IntelGraphicsProfiles
2023-12-17 18:14 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-12-17 18:14 - 2021-11-22 00:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-17 18:14 - 2021-11-21 23:47 - 000008192 ___SH C:\DumpStack.log.tmp
2023-12-17 18:14 - 2021-11-21 23:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-12-17 18:14 - 2021-11-21 23:47 - 000000000 ___HD C:\Intel
2023-12-17 18:09 - 2021-11-21 23:47 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-12-17 18:06 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-12-17 17:16 - 2021-11-22 00:20 - 000000000 ____D C:\Users\gabri\AppData\Local\Packages
2023-12-17 14:18 - 2021-12-13 12:13 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Teams
2023-12-17 11:18 - 2021-11-22 00:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-12-17 11:17 - 2021-11-22 00:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-17 10:59 - 2021-12-01 21:06 - 000000000 ____D C:\Users\gabri\AppData\Local\CrashDumps
2023-12-17 10:27 - 2021-12-22 19:59 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\PowerPoint
2023-12-17 10:26 - 2022-12-01 22:56 - 000051923 _____ C:\Users\gabri\OneDrive\Bureau\maisons chateau minecraft.pptx
2023-12-17 01:05 - 2021-11-22 00:28 - 000000000 ____D C:\Users\gabri\AppData\Local\D3DSCache
2023-12-17 00:53 - 2021-11-22 00:27 - 000000000 ____D C:\Users\gabri\AppData\Roaming\.tlauncher
2023-12-17 00:47 - 2021-11-22 00:22 - 000000000 ____D C:\Users\gabri\AppData\Roaming\discord
2023-12-17 00:43 - 2021-11-22 00:27 - 000000000 ____D C:\Users\gabri\AppData\Roaming\.minecraft
2023-12-17 00:40 - 2022-12-11 19:56 - 000000000 ____D C:\Users\gabri\AppData\Local\Discord
2023-12-17 00:40 - 2021-11-28 20:02 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Word
2023-12-17 00:37 - 2022-07-28 13:57 - 000000000 ____D C:\Users\gabri\OneDrive\Bureau\Les Rois Européens Généalogie
2023-12-16 16:05 - 2021-12-13 18:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-12-16 06:03 - 2021-11-21 23:47 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-15 06:14 - 2021-12-12 10:24 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-12-15 06:14 - 2021-12-12 10:24 - 000002178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-12-15 06:14 - 2021-12-12 10:16 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4030407711-1060188347-3593659480-1003
2023-12-14 00:34 - 2021-12-20 18:43 - 000002245 _____ C:\Users\gabri\OneDrive\Bureau\Discord.lnk
2023-12-14 00:33 - 2021-11-22 00:20 - 000000000 ____D C:\Users\gabri\AppData\Roaming\hpqLog
2023-12-14 00:32 - 2021-11-21 23:47 - 000610392 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-12-14 00:32 - 2021-08-16 03:36 - 000000000 ____D C:\ProgramData\Bromium
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-12-14 00:28 - 2021-11-22 00:24 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-12-14 00:28 - 2021-11-22 00:21 - 000000000 ____D C:\WINDOWS\servicing
2023-12-13 22:52 - 2021-11-26 18:48 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Excel
2023-12-13 18:59 - 2021-11-22 00:21 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-12-13 18:58 - 2021-11-22 00:24 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-12-13 18:58 - 2021-11-22 00:24 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2023-12-13 18:56 - 2021-11-21 23:49 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-12-13 16:00 - 2020-05-05 21:05 - 000000000 ____D C:\ProgramData\Packages
2023-12-09 18:07 - 2023-08-31 18:52 - 000001409 _____ C:\Users\gabri\OneDrive\Bureau\Roblox Player.lnk
2023-12-09 18:07 - 2023-05-14 11:17 - 000001237 _____ C:\Users\gabri\OneDrive\Bureau\Roblox Studio.lnk
2023-12-09 18:07 - 2023-05-14 11:17 - 000000000 ____D C:\Users\gabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2023-12-08 00:54 - 2021-11-22 00:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-12-07 04:26 - 2021-11-29 21:03 - 000003884 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-12-07 04:26 - 2021-11-29 21:03 - 000003760 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-12-05 00:39 - 2021-11-22 00:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-12-05 00:39 - 2021-08-16 03:34 - 000000000 ____D C:\Program Files\Microsoft Office
2023-12-03 23:20 - 2023-11-08 17:07 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_3.dll
2023-12-03 23:20 - 2022-10-23 02:24 - 000095848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-12-03 23:20 - 2022-10-23 02:24 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-12-03 23:20 - 2021-12-05 16:44 - 002754152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000214632 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000194040 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-12-03 23:20 - 2021-12-05 16:44 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-12-02 14:07 - 2021-12-20 18:27 - 000000000 ____D C:\Program Files\paint.net
2023-12-02 00:53 - 2023-10-09 21:18 - 000042698 _____ C:\Users\gabri\OneDrive\Documents\edt s.xlsx
2023-11-29 12:59 - 2021-12-05 16:29 - 000000000 ____D C:\Program Files (x86)\Overwolf
==================== Fichiers à la racine de certains dossiers ========
2021-11-27 01:43 - 2021-11-27 09:52 - 000028672 _____ () C:\Users\gabri\AppData\Roaming\crash.bin
2021-12-13 16:38 - 2021-12-13 16:38 - 000472756 _____ () C:\Users\gabri\AppData\Roaming\DreamPlan.dmp
2023-11-09 20:20 - 2023-11-09 20:20 - 000012118 _____ () C:\Users\gabri\AppData\Local\apps.crx
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================